NPM

A coordinated software supply chain attack by the group TeamPCP compromised the popular LiteLLM library on March 24, uploading malicious…

A widely-used NPM package called 'is' was compromised in a supply chain attack, distributing malware-infected versions (3.3.1 to 5.0.0) with…

A widespread supply chain attack compromised 17 popular NPM packages, injecting malicious code that acts as a remote access trojan,…